Group access to project

Currently the access to Mendix projects is only manageable on a user level. Every user that needs access to a project needs to receive an invite, and after accepting the invite the proper access settings for the user can be conifgured. When working with a small amount of projects this works like a charm. When the amount of projects grows a lot, this can become quite a hassle. We have several roles in our organisation where we require a more ad-hoc type of access to projects.

The most relatable role is that of a DevOps engineer. Every DevOps engineer needs to have acces to all the projects we have certain responsibilities for. This means that we need to:

• Add every DevOps engineer to every project(Which is taking more and more time as the number of projects grow)
  or
• Add a ‘general’ DevOps user where every DevOps engineer has access to(And removes all traceability to the actions performed by this account).

To solve this problem I would like to see the possibility to add UserGroups to a company and to a project:

• An UserGroup is defined on a company level.
• Individual users can be added to the UserGroup .
• An UserGroup can be added to a project just like a normal user can be added, with exactly the same access settings.

Then comes the tricky part: Traceability. We don't want the UserGroup to act like a untraceable, general user. Thus we need to register when someone within the UserGroup uses their access to a project.

• One option is to automatically assign the respective UserGroup access rights to the individual User in the group  upon an access attempt(which needs to be logged as activity ofcourse)
• Another option would be to allow a member of the UserGroup to Invite themselves to a specific application where the UserGroup has access to. (Which would show up exactly like a user invited by another user).